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CLAIM AMENDMENTS: 

1. (currently amended) A method for monitoring a communication 
media access schedule of a communication controller in a 
communication system by means of a bus guardian , the 
communication system comprising a communication media and 
nodes connected to the communication media, each node having a 
communication controlle r and o bu s guardian assigned to the 
communication contro l ler , wherein messages are transmitted among 
the nodes across the communication media based on a cyclic time 
triggered communication media access scheme, the method 
comprising the steps of: 

a) providing- the bu s guardian with a priori knowledge about 
possible deviations from the communication media access 
schedule during startup of the communication; and 

b) using said a priori knowledg e of the bus guardian during 
startup of the communication to distinguish between an 
allowed deviation and a forbidden deviation caused by a 
failure of the communication controller. 

2. (currently amended) The method of claim 1, wherein allowed 
deviations from the communication media access schedule during 
startup of the communication are represented by reset information 
(SR) and by a chronological occurrence of the reset information 
(SR), wherein the bus gu a rdi a n - monitors the reset information (SR) 
is monitored and the chronological occurrence of the reset 
information (SR) during startup of the communication. 

3. (currently amended) The method of claim 2 claim 1 , wherein during 
startup of the communication,- ^ commun i cation controller of one 
of the nodes transmits a first trigger signa l (ARM) to the bus 
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guordion assigned to that communicat i on contro l ler, the bus 
guardian defin e s at least one expectation window is defined 
according to said a priori information the bus guardian monitors an 
occurrence of further trigger signals within the at least one 
expectation window being monitored , and the bus guard ian 
distinguishes botwoon an allowed deviation and a forbidden deviation 
bejngjjjstinoulshed in dependence on an occurrence of further 
trigger signals within the at least one expectation window and in 
dependence on said a priori Information. 

4. (currently amended) The method of claim 3 claim 22 , wherein said 
first trigger signal (ARM) is transmitted at a beginning of a tlmeslot 
In a cycle of the communication media access scheme and a first 
expectation window is defined at an end of said timeslot in said 
cycle. 

5. (original) The method of claim 4, wherein a further trigger signal 
(ARM) within a further expectation window defines a beginning of a 
new cycle of the communication media access scheme. 

6. (original) The method of claim 5, wherein each of a number of 
further expectation windows is defined at a beginning of subsequent 
cycles of the communication media access scheme. 

« 

7. (original) The method of claim 6, wherein said number of further 
expectation windows is defined according to said a priori data, 

8. (original) The method of claim 7, wherein said number of further 
expectation windows is defined according to a parameter 
(ColdStartMax) defining a maximum number of cycles for which the 
communication controller is allowed to actively try to establish 
communication with a further communication controller of one of the 
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other nodes of the communication system. 

9. (original) The method of claim 3, wherein for an allowed deviation 
from the communication media access schedule, the expectation 
windows may or may not contain further trigger signals (ARM). 

10. (original) The method of claim 6, wherein for a valid schedule-reset 
(SR.), there are no further trigger signals (ARM) within the further 
expectation windows. 

11. (currently amended) The method of eJaim- 3claim 22, wherein for a 
forbidden deviation from the communication media access schedule, 
there are no further trigger signals (ARM) outside the expectation 
windows. 

12. (currently amended) A data carrier on which a c omputer programjs 
stored for execution on one of a computer and a microprocessor, 
wherein the computer program is programmed to execute the 
method of claim 1. 

- 

13. (currently amended) The data carrier c omputer progr a m of claim 12, 
wherein the computer program is stored in one of a read-only- 
memory, a random-access-memory, and a flash-memory. 

14. (cancelled) 

15. (cancelled) 

16. (currently amended) One of a number of nodes connected to a 
communication media, wherein messages are transmitted among the 
nodes across the communication media based on a cyclic time 
triggered communication media access scheme, the node 
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comprising: 

a communication controller; and 

a - bu s guardian assigned to said commun i cation control l er - ; s aid 
bus guardian hav i ng means for monitoring the communication 
media access schedule of said communication controller, 

wherein said bus - Guardian has said monitoring means having 
stored r a priori knowledge about possible deviations from the 
communication media access schedule during startup of the 
communication and sa i d bus guard i an ha s means for making 
use of said a priori knowledge in order to distinguish between 
an allowed deviation and a forbidden deviation caused by a 
failure of said communication controller during startup. 

17. (cancelled) 

18. (currently amended) A communication system comprising: 

a communication media; and 

nodes connected to said communication media, wherein 
messages are transmitted among said nodes across said 
communication media based on a cyclic time triggered 
communication media access scheme, each node having a 
communication controller and a bus guard i an assigned to tho 
communication controller, the bug auardion means for 
monitoring a communication media access schedule of said 
communication controller, wherein said bus 
auardian monitorina means has a priori knowledge about 
possible deviations from the communication media access 
schedule during startup of the communication and said bus 
guardian monitorinq means has means for making use of said a 
priori knowledge in order to distinguish between an allowed 
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deviation and a forbidden deviation caused by a failure of said 
communication controller during startup of the communication, 

19. (original) The communication system of claim 18, wherein said a 
priori knowledge comprises reset information (SR) and a 
chronological occurrence of said reset information (SR) during 
startup of the communication, wherein said means for making use of 
said a priori knowledge monitor said reset information (SR) and said 
chronological occurrence of said reset information (SR) during 
startup of the communication tn order to distinguish between an 
allowed deviation and a forbidden deviation caused by a failure of 
said communication controller. 

20. (cancelled) 

21. (new) The method of_c!aim 1. wherein, during startup of the 
communication, the commu nication controller of one of the nodes 
transmits a first trigger signal (ARNn to a bus guardian assigned to 
that communication controller. 
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